Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: eA08TfCl618vcWQPDy2gtsHIrYvZs8Jg0fb23EOJBu4=
Subject key identifier: 19:5E:65:25:0E:00:97:71:9C:21:DE:4B:F2:33:D4:2D:E2:07:73:6D
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 01976F62C6F91976D1CA9D65F76C244677AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 09DF
Signing time: Sat 14 Jun 2025 17:00:33 +0000
Manifest this update: Sat 14 Jun 2025 17:00:33 +0000
Manifest next update: Sun 15 Jun 2025 17:00:33 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: YLYv+LSQ7oZ/53MRsQjjsZifjXLiY4Sy6nRwiQNiHJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:c6:f9:19:76:d1:ca:9d:65:f7:6c:24:46:77:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Jun 14 17:00:33 2025 GMT
Not After : Jun 15 17:00:33 2025 GMT
Subject: CN=195e65250e0097719c21de4bf233d42de207736d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:2f:46:f5:f7:47:e1:49:3d:ea:dc:ac:2b:
12:97:9b:48:8c:68:9b:71:ad:fa:fd:e9:b2:e0:ad:
58:e2:67:f3:56:30:9d:93:71:fc:2d:0b:43:22:38:
0d:76:33:ed:c3:22:09:62:02:25:26:98:92:8b:85:
c5:e4:b8:06:00:6b:ec:64:c6:d6:7d:84:19:47:ec:
9a:c5:2e:08:f4:92:fa:44:a4:d6:b3:0c:9b:d6:0d:
b7:c0:66:7c:3d:5e:e8:bb:54:77:21:13:47:88:b6:
3e:f5:60:f0:29:ca:a4:58:dc:3c:f5:7d:3a:d0:34:
ea:cf:67:06:a5:6a:ff:e4:8d:26:59:02:d9:b4:be:
c5:40:65:64:7d:cb:45:21:37:10:b2:dc:6b:83:65:
ed:73:09:a4:68:9e:27:03:31:3e:47:98:77:c9:06:
5d:62:70:02:30:df:f9:8b:91:2f:6e:66:3c:8b:4c:
84:de:b6:bf:c7:ba:8d:20:d3:b4:cc:9f:e7:69:0d:
1e:a8:0a:75:76:54:f1:06:7e:1c:14:31:2a:88:17:
6e:f9:bd:b2:b9:43:3c:17:37:63:49:2d:18:1a:4b:
df:eb:eb:7c:d1:a3:f7:1c:d2:5f:44:8f:d3:a2:c9:
11:d2:28:73:0a:21:f5:4d:ef:b6:aa:ea:3e:91:6e:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5E:65:25:0E:00:97:71:9C:21:DE:4B:F2:33:D4:2D:E2:07:73:6D
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:58:29:72:0b:0f:17:f3:c2:d0:dc:65:6a:07:38:ff:e4:
6f:b5:ee:1c:bc:af:95:68:ec:66:ed:4e:cf:2f:15:93:3c:eb:
82:41:25:2d:1a:c2:fc:e9:4f:f4:36:a8:3e:f9:17:fe:d7:7b:
38:77:0f:78:04:4f:e5:0c:3d:b4:b4:91:25:9a:36:76:e7:46:
4f:3d:b6:2e:ee:4a:87:2f:01:3a:1b:17:43:cf:80:a7:c5:2c:
36:d6:cd:cd:6f:28:54:bb:a4:49:c2:5b:ce:f0:06:0a:84:01:
b4:ad:8d:d5:ab:98:89:06:a9:8a:6f:6f:5c:28:90:c4:23:71:
da:90:52:1e:cd:07:87:82:ec:3a:b9:39:18:a0:3b:af:b2:43:
21:aa:a6:72:f3:df:77:5b:99:dd:ec:7c:b2:28:af:b4:68:df:
d2:ad:8f:1e:be:7b:32:eb:46:59:74:e5:bf:7d:8d:6b:36:e0:
37:21:65:90:57:c4:88:a9:d8:9f:4f:1c:8b:74:54:26:0f:4e:
70:f6:a4:49:bc:d1:e5:25:5e:86:25:39:f8:0e:04:4c:b9:2e:
3e:e4:f4:d6:a3:ff:9c:53:4a:0b:76:8e:3c:5f:9c:50:e1:c8:
b1:ae:c4:20:04:b1:89:8e:1c:f3:ff:77:b6:d4:92:ce:04:b5:
d9:6d:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:47 2025 by rpki-client